Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File:                     U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier:          90ErpVTxhvt2fxqdh0rIKr3lyzbtgdgp47oi8N0mqIw=
Subject key identifier:   81:4D:44:4D:E2:A8:4C:FE:A3:2A:72:ED:B5:FC:EC:46:DB:F1:5D:CC
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer:       /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial:       01962E995C6E25ADA3030ACFF4BC36F2506B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number:          42
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: 3+V9LutVnjH+foXAjJ89VpLHPY6j38j6iNfe700vxxk=)
                          2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:6e:25:ad:a3:03:0a:cf:f4:bc:36:f2:50:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=814d444de2a84cfea32a72edb5fcec46dbf15dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:01:ae:97:33:89:1d:b8:87:45:fd:a8:a4:
                    15:1b:aa:f5:f1:52:d4:a9:af:b9:c3:69:f0:53:09:
                    f0:7d:7e:c8:c8:bb:af:8a:16:9f:8e:54:ea:00:d4:
                    62:00:70:55:57:00:fc:4d:20:78:a3:8a:b4:cf:5d:
                    91:e6:50:56:f0:20:a2:51:2f:ae:30:fb:9d:d3:ae:
                    2c:d1:e4:4e:30:28:0e:08:a8:3d:51:41:18:b1:a6:
                    1a:5b:82:cd:4f:73:36:d3:55:05:41:65:17:40:80:
                    8b:73:a3:ae:97:c4:fd:be:cf:7b:fc:c2:85:90:89:
                    92:01:f5:8f:9c:9e:af:f9:a2:f0:57:1c:cf:f4:05:
                    8c:af:ea:49:d2:c9:b5:c7:f2:47:00:ef:e3:e3:f9:
                    ef:91:84:6c:23:b5:8a:eb:c5:d0:00:8b:d6:28:6f:
                    5a:4b:d2:38:91:ae:be:57:a7:fd:bd:11:a2:c1:d8:
                    ef:54:ba:31:f3:d7:f3:58:50:5a:9b:e8:8a:6d:55:
                    48:4f:9c:37:1e:79:e9:37:91:ab:4b:5e:e4:fc:b8:
                    b4:1a:f6:97:2e:ff:a1:ed:0f:a4:96:a6:7d:81:3c:
                    36:b7:45:eb:56:58:8e:30:aa:ea:e7:0a:84:0f:0e:
                    48:63:6a:f5:2d:e2:94:cd:f4:7d:bc:be:ac:58:4c:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:44:4D:E2:A8:4C:FE:A3:2A:72:ED:B5:FC:EC:46:DB:F1:5D:CC
            X509v3 Authority Key Identifier:
                keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:78:67:c4:c8:e1:e4:6d:0f:8c:13:eb:73:ba:83:e0:ad:5b:
         dd:34:ee:84:9a:7a:73:c7:5b:e5:ab:c9:98:e0:fe:2b:58:5f:
         36:90:3d:9a:e2:2f:d2:22:72:46:da:34:fa:bd:2a:64:b0:b6:
         f9:56:d7:3c:6a:56:6d:35:1c:ba:9a:ba:41:46:1c:61:c9:c6:
         07:0c:f8:d9:ef:37:c9:ea:14:49:f3:6e:12:d5:07:ee:4c:23:
         a8:be:12:01:97:9b:57:fd:78:6e:93:c1:3d:76:04:6b:5c:03:
         63:12:4f:bb:56:d5:8d:91:ae:ba:27:74:e2:6b:f8:4b:d7:52:
         e4:16:ab:5d:f4:13:ff:41:3a:a5:0a:74:ce:a4:29:9c:17:fa:
         b9:9e:c6:cd:3f:48:7a:0c:4c:7b:a6:e8:36:e9:51:ac:ba:9a:
         2d:0d:28:fc:10:9b:34:b4:cb:e8:5f:01:fd:f9:59:db:b2:b3:
         b9:96:c2:b3:59:a0:44:2e:86:8f:e4:f8:ab:c5:67:e7:ed:26:
         95:9e:a2:17:46:34:05:48:8b:3d:0e:76:79:72:1a:8f:49:b3:
         83:30:c6:42:64:32:74:b8:69:9d:7b:6e:5a:eb:42:de:b7:e2:
         2c:e7:29:78:a7:e0:6c:be:d1:59:c5:d9:bd:33:97:32:18:47:
         92:7b:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----